Vulnerability in Hitachi Energy Asset Suite
CVE-2025-1484
A vulnerability exists in the media upload component of the Asset Suite versions listed below. If successfully exploited an attacker could impact the confidentiality or integrity of the system. An attacker can use this vulnerability to construct a request that will cause JavaScript code supplied by the attacker to execute within the user’s browser in the context of that user’s session with the application.
EPSS: 0.002 (9.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L.
Affected products
- Hitachi Energy Asset Suite — versions 9.6.4.4, 9.6.4.5
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-1484?
- CVE-2025-1484 is a medium-severity vulnerability in Hitachi Energy Asset Suite, classified under Incomplete List of Disallowed Inputs. CVSS score: 6.5/10. Published 2025-05-30.
- How severe is CVE-2025-1484?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2025-1484 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.